Skip to content
CookieTosser

What does costco.com track?

Before any consent, costco.com loaded 3 tracking companies and set 11 advertising or analytics cookies.

That's more tracking companies than 58% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading www.costco.com once and clicking nothing. How we scan

Tracking companies
3
Tracking cookies
11
Third-party hosts
20
Cookies in total
35

Consent banner

No known consent management platform was detected on the page.

Companies contacted before consent

4 of the 10 companies it contacted before consent were unclassified.

  • Criteo

    b.us5.us.criteo.com, d.us.criteo.com, gum.criteo.com, dynamic.criteo.com

    34 requestsAdvertising
  • Adobe

    assets.adobedtm.com, adobedc.demdex.net

    13 requestsAnalytics
  • Dynatrace

    bf47427jhn.bf.dynatrace.com, js-cdn.dynatrace.com

    12 requestsAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • queue-it.net

    static.queue-it.net, assets.queue-it.net

    6 requestsUnclassified
  • costco-static.com

    bfasset.costco-static.com

    3 requestsUnclassified
  • intake-lr.com

    cdn.intake-lr.com, r.intake-lr.com

    3 requestsUnclassified
  • cdndex.io

    reporting.cdndex.io

    1 requestUnclassified
  • Transcend

    transcend-cdn.com

    2 requestsConsent banner
  • Google

    fonts.gstatic.com

    2 requestsFunctional
  • Cloudflare

    cloudflare.com

    1 requestContent delivery

Cookies set before consent

The longest-lived tracking cookie it set was cto_bundle, from Criteo, lasting about 13 months.

CookiePurposeSet byLasts
AMCV_97B21CFE5329614E0A490D45%40AdobeOrgAdvertisingcostco.com13 months
cto_bundleAdvertisingcriteo.com (third party)13 months
cto_bundleAdvertisingcostco.com13 months
demdexAdvertisingdemdex.net (third party)6 months
uidAdvertisingcriteo.com (third party)13 months
ajs_anonymous_idAnalyticscostco.com12 months
dtCookieAnalyticscostco.comSession
dtPCAnalyticscostco.comSession
dtSaAnalyticscostco.comSession
rxVisitorAnalyticscostco.comSession
rxvtAnalyticscostco.comSession
_lr_hb_-costco%2Fproduction-vrwnoUnclassifiedwww.costco.com1 day
_lr_tabs_-costco%2Fproduction-vrwnoUnclassifiedwww.costco.com1 day
adobeopt_expUnclassifiedcostco.com21 days
BCOUnclassifiedcostco.comSession
C_WHLOCUnclassifiedwww.costco.com6 months
CriteoSessionUserIdUnclassifiedwww.costco.com30 days
f_asUnclassifiedcostco.comSession
f_asUnclassifiedwww.costco.comSession
invCheckCityUnclassifiedwww.costco.com13 months
invCheckPostalCodeUnclassifiedwww.costco.com13 months
invCheckStateCodeUnclassifiedwww.costco.com13 months
kndctr_97B21CFE5329614E0A490D45_AdobeOrg_clusterUnclassifiedcostco.comUnder a day
kndctr_97B21CFE5329614E0A490D45_AdobeOrg…Unclassifiedcostco.com13 months
KP_UIDzUnclassifiedwww.costco.com1 day
KP_UIDz-ssnUnclassifiedwww.costco.com1 day
STORELOCATIONUnclassifiedwww.costco.com6 months
WAREHOUSEDELIVERY_WHSUnclassifiedwww.costco.com1 day
WC_ACTIVEPOINTERUnclassifiedwww.costco.comSession
WC_AUTHENTICATION_-1002Unclassifiedwww.costco.comSession
WC_GENERIC_ACTIVITYDATAUnclassifiedwww.costco.comSession
WC_PERSISTENTUnclassifiedwww.costco.com14 days
WC_SESSION_ESTABLISHEDUnclassifiedwww.costco.comSession
WC_USERACTIVITY_-1002Unclassifiedwww.costco.comSession
JSESSIONIDFunctionalwww.costco.comSession

The page also wrote 18 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.